they're actually not private by default -- it's all about however you setup the bucket.  And I thought that perhaps the old code used the cloudfront url by default?

in any case, I don't care about losing that functionality.